Senior Identity Verification Engineer - Passwordless IAM

EY; San Mateo (CA); On-site; USD 110,000 - 165,000; Full time

Benefits offered by this job

Hybrid work model

Flexible vacation policy

Job summary

EY is seeking an Identity Verification Engineer to design and implement identity proofing and passwordless authentication across enterprise platforms. The role covers 1Kosmos and Microsoft Verified ID administration, API integrations, and cloud IAM with Entra ID/Azure AD.

You will work with architects, security teams, and business stakeholders. Responsibilities include configuring biometric verification, liveness checks, and certifications, plus ensuring compliance and scalable integration

Qualifications

• Bachelor’s degree in Computer Science, Information Security, Information Systems, or related field.
• 3-5+ years of IAM experience.
• 2+ years implementing 1Kosmos or Microsoft Verified ID.
• Experience with identity proofing, passwordless authentication, and biometrics.

Responsibilities

• Design and implement identity proofing workflows using 1Kosmos or Microsoft Verified ID.
• Configure and support document verification, biometric authentication, facial recognition, and liveness detection.
• Implement IAL2-grade identity proofing per NIST 800-63.
• Support onboarding journeys for employees, contractors, vendors, and privileged users.
• Configure and administer 1Kosmos BlockID and related services.
• Manage enrollment, policies, and authentication workflows.
• Integrate IAM platforms (SailPoint, Saviynt, ISIM/ISVG, Ping, Okta).
• Develop and support API-based integrations and SAML/OIDC/SCIM configurations.
• Implement passwordless authentication strategies (Biometrics, FIDO2/WebAuthn).
• Ensure security/compliance and runbooks for identity solutions.
• Participate in architecture reviews, POCs, pilots, and deployments.

Skills

IAM domain expertise

Identity proofing

Biometric verification

Onboarding processes

Education

Bachelor’s degree in Computer Science, Information Security, Information Systems, or related field

Tools

1Kosmos BlockID

Microsoft Entra ID

Azure AD

Active Directory

SAML

OIDC

OAuth 2.0

SCIM

REST APIs

FIDO2/WebAuthn

IdRamp

CLEAR

SailPoint

Job description

EY is seeking an Identity Verification Engineer to design and implement identity proofing and passwordless authentication across enterprise platforms. The role covers 1Kosmos and Microsoft Verified ID administration, API integrations, and cloud IAM with Entra ID/Azure AD.

You will work with architects, security teams, and business stakeholders. Responsibilities include configuring biometric verification, liveness checks, and certifications, plus ensuring compliance and scalable integration